Add scheduled scanning to the templates for GitLab and GitHub (#304)

jfrog · Apr 19, 2023 · 88c7470 · 88c7470
1 parent e0ab27d
commit 88c7470
Show file tree

Hide file tree

Showing 13 changed files with 39 additions and 14 deletions.
diff --git a/.github/workflows/frogbot-scan-and-fix.yml b/.github/workflows/frogbot-scan-and-fix.yml
@@ -3,6 +3,8 @@ on:
   push:
     branches:
       - "dev"
+  schedule:
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write

diff --git a/action/lib/main.js b/action/lib/main.js
@@ -46,6 +46,7 @@ function main() {
                     yield utils_1.Utils.execScanPullRequest();
                     break;
                 case "push":
+                case "schedule":
                     yield utils_1.Utils.execCreateFixPullRequests();
                     break;
                 default:

diff --git a/action/node_modules/.package-lock.json b/action/node_modules/.package-lock.json
diff --git a/action/src/main.ts b/action/src/main.ts
@@ -12,6 +12,7 @@ async function main() {
                 await Utils.execScanPullRequest();
                 break;
             case "push":
+            case "schedule":
                 await Utils.execCreateFixPullRequests();
                 break;
             default:

diff --git a/docs/install-gitlab.md b/docs/install-gitlab.md
@@ -19,10 +19,9 @@ frogbot-scan:
       variables:
         FROGBOT_CMD: "scan-pull-request"
         JF_GIT_BASE_BRANCH: $CI_MERGE_REQUEST_TARGET_BRANCH_NAME
-      # Creating fix pull requests will be triggered by any push to the default branch.
-      # You can change it to any other branch you want, for example:
-      # if: $CI_COMMIT_BRANCH == "dev"
-    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+      # Repository scanning is triggered by any push to the default branch.
+      # If you'd like a different branch to be scanned, replace $CI_DEFAULT_BRANCH in the line below with the name of branch, wrapped with quotes (").
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH || $CI_PIPELINE_SOURCE == "schedule"
       variables:
         FROGBOT_CMD: "create-fix-pull-requests"
         JF_GIT_BASE_BRANCH: $CI_COMMIT_BRANCH

diff --git a/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-go.yml b/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-go.yml
@@ -1,11 +1,14 @@
 name: "Frogbot Scan and Fix"
 on:
   push:
-    # Creating fix pull requests will be triggered by any push to one of the these branches.
+    # Creating fix pull requests will be triggered by any push to one of these branches.
     # You can add or replace to any branch you want to open fix pull requests for.
     branches:
       - "main"
       - "master"
+  schedule:
+    # The job will run once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write

diff --git a/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-maven.yml b/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-maven.yml
@@ -1,11 +1,14 @@
 name: "Frogbot Scan and Fix"
 on:
   push:
-    # Creating fix pull requests will be triggered by any push to one of the these branches.
+    # Creating fix pull requests will be triggered by any push to one of these branches.
     # You can add or replace to any branch you want to open fix pull requests for.
     branches:
       - "main"
       - "master"
+  schedule:
+    # The job will run once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write

diff --git a/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-npm.yml b/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-npm.yml
@@ -1,11 +1,14 @@
 name: "Frogbot Scan and Fix"
 on:
   push:
-    # Creating fix pull requests will be triggered by any push to one of the these branches.
+    # Creating fix pull requests will be triggered by any push to one of these branches.
     # You can add or replace to any branch you want to open fix pull requests for.
     branches:
       - "main"
       - "master"
+  schedule:
+    # The job will run once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write

diff --git a/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-pip.yml b/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-pip.yml
@@ -1,11 +1,14 @@
 name: "Frogbot Scan and Fix"
 on:
   push:
-    # Creating fix pull requests will be triggered by any push to one of the these branches.
+    # Creating fix pull requests will be triggered by any push to one of these branches.
     # You can add or replace to any branch you want to open fix pull requests for.
     branches:
       - "main"
       - "master"
+  schedule:
+    # The job will run once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write

diff --git a/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-pipenv.yml b/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-pipenv.yml
@@ -1,11 +1,14 @@
 name: "Frogbot Scan and Fix"
 on:
   push:
-    # Creating fix pull requests will be triggered by any push to one of the these branches.
+    # Creating fix pull requests will be triggered by any push to one of these branches.
     # You can add or replace to any branch you want to open fix pull requests for.
     branches:
       - "main"
       - "master"
+  schedule:
+    # The job will run once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write

diff --git a/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-poetry.yml b/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-poetry.yml
@@ -1,11 +1,14 @@
 name: "Frogbot Scan and Fix"
 on:
   push:
-    # Creating fix pull requests will be triggered by any push to one of the these branches.
+    # Creating fix pull requests will be triggered by any push to one of these branches.
     # You can add or replace to any branch you want to open fix pull requests for.
     branches:
       - "main"
       - "master"
+  schedule:
+    # The job will run once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write

diff --git a/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-yarn.yml b/docs/templates/github-actions/scan-and-fix/frogbot-scan-and-fix-yarn.yml
@@ -1,11 +1,14 @@
 name: "Frogbot Scan and Fix"
 on:
   push:
-    # Creating fix pull requests will be triggered by any push to one of the these branches.
+    # Creating fix pull requests will be triggered by any push to one of these branches.
     # You can add or replace to any branch you want to open fix pull requests for.
     branches:
       - "main"
       - "master"
+  schedule:
+    # The job will run once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write

diff --git a/starter-workflows/code-scanning/frogbot-scan-and-fix.yml b/starter-workflows/code-scanning/frogbot-scan-and-fix.yml
@@ -13,6 +13,9 @@ name: "Frogbot Scan and Fix"
 on:
   push:
     branches: [ $default-branch ]
+  schedule:
+    # The job will run once a day at 00:00 GMT.
+    - cron: "0 0 * * *"
 permissions:
   contents: write
   pull-requests: write
@@ -55,8 +58,6 @@ jobs:
           # The 'frogbot' executable and other tools it needs will be downloaded through this repository.
           # JF_RELEASES_REPO: ""
 
-
-
           ##########################################################################
           ##   If you project uses a 'frogbot-config.yml' file, you can define    ##
           ##   the following variables inside the file, instead of here.          ##